Skip to content
OpenAdvisories
High CVE-2021-30080 EUVD-2022-1592GHSA-28r6-jm5h-mrggGO-2022-0572

Access control bypass in Beego

Published Apr 5, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Package: github.com/astaxie/beego Package: github.com/beego/beego Package: github.com/beego/beego/v2 Ecosystem: Go

Description

An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/astaxie/beego all versions — GO-2022-0572
Go github.com/beego/beego <= 1.12.11 — GHSA-28r6-jm5h-mrgg
Go github.com/beego/beego all versions — GO-2022-0572
Go github.com/beego/beego/v2 >= 2.0.0, < 2.0.3 2.0.3 GHSA-28r6-jm5h-mrgg

References